Design/Logic Flaw

2023-06-0600:15:00

PRIOn knowledge base

www.prio-n.com

arbitrary file upload

advantech webaccess/scada

remote code execution

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.4%

JSON

In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to modify the file extension of a certificate file to ASP when uploading it, which can lead to remote code execution.

CPENameOperatorVersion
webaccess\\/scadale9.1.3

CPE	Name	Operator	Version
	webaccess\\/scada	le	9.1.3

References

www.cisa.gov/news-events/ics-advisories/icsa-23-152-01